40fa684c18
Keep module compatibility with mbedtls 2.x (old LTS branch). A patch has been added to allow compiling after removing all the `psa_*` files from the library folder (will look into upstreaming it). Note: mbedTLS 3.6 finally enabled TLSv1.3 by default, but it requires some module changes, and to enable PSA crypto (new "standard" API specification), so it might be best done in a separate commit/PR.
74 lines
3.3 KiB
C++
74 lines
3.3 KiB
C++
/**************************************************************************/
|
|
/* godot_module_mbedtls_config.h */
|
|
/**************************************************************************/
|
|
/* This file is part of: */
|
|
/* GODOT ENGINE */
|
|
/* https://godotengine.org */
|
|
/**************************************************************************/
|
|
/* Copyright (c) 2014-present Godot Engine contributors (see AUTHORS.md). */
|
|
/* Copyright (c) 2007-2014 Juan Linietsky, Ariel Manzur. */
|
|
/* */
|
|
/* Permission is hereby granted, free of charge, to any person obtaining */
|
|
/* a copy of this software and associated documentation files (the */
|
|
/* "Software"), to deal in the Software without restriction, including */
|
|
/* without limitation the rights to use, copy, modify, merge, publish, */
|
|
/* distribute, sublicense, and/or sell copies of the Software, and to */
|
|
/* permit persons to whom the Software is furnished to do so, subject to */
|
|
/* the following conditions: */
|
|
/* */
|
|
/* The above copyright notice and this permission notice shall be */
|
|
/* included in all copies or substantial portions of the Software. */
|
|
/* */
|
|
/* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, */
|
|
/* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF */
|
|
/* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. */
|
|
/* IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY */
|
|
/* CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, */
|
|
/* TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE */
|
|
/* SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */
|
|
/**************************************************************************/
|
|
|
|
#ifndef GODOT_MODULE_MBEDTLS_CONFIG_H
|
|
#define GODOT_MODULE_MBEDTLS_CONFIG_H
|
|
|
|
#include "platform_config.h"
|
|
|
|
#ifdef GODOT_MBEDTLS_INCLUDE_H
|
|
|
|
// Allow platforms to customize the mbedTLS configuration.
|
|
#include GODOT_MBEDTLS_INCLUDE_H
|
|
|
|
#else
|
|
|
|
// Include default mbedTLS config.
|
|
#include <mbedtls/mbedtls_config.h>
|
|
|
|
// Disable weak cryptography.
|
|
#undef MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
|
|
#undef MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
|
|
#undef MBEDTLS_DES_C
|
|
#undef MBEDTLS_DHM_C
|
|
|
|
#ifndef __linux__
|
|
// ARMv8 hardware AES operations. Detection only possible on linux.
|
|
#undef MBEDTLS_AESCE_C
|
|
#endif
|
|
|
|
// Disable deprecated
|
|
#define MBEDTLS_DEPRECATED_REMOVED
|
|
|
|
// mbedTLS 3.6 finally enabled TLSv1.3 by default, but it requires some mobule
|
|
// changes, and to enable PSA crypto (new "standard" API specification).
|
|
// Disable it for now.
|
|
#undef MBEDTLS_SSL_PROTO_TLS1_3
|
|
|
|
// Disable PSA Crypto.
|
|
#undef MBEDTLS_PSA_CRYPTO_CONFIG
|
|
#undef MBEDTLS_PSA_CRYPTO_C
|
|
#undef MBEDTLS_PSA_CRYPTO_STORAGE_C
|
|
#undef MBEDTLS_PSA_ITS_FILE_C
|
|
#undef MBEDTLS_LMS_C
|
|
|
|
#endif // GODOT_MBEDTLS_INCLUDE_H
|
|
|
|
#endif // GODOT_MODULE_MBEDTLS_CONFIG_H
|